Manager Technology Audit

Permanent Full Time

**Manager, Technology Audit**

We are looking for a **Manager,** **Technology Audit**to join our highly performing team. Given the size and scope of our organization, we have the flexibility for this position to be located in the following head office locations: Toronto, London, Winnipeg.

**What you will do**:
Reporting to the AVP Technology Audit, the Manager, Technology Audit will support the achievement of Internal Audit’s vision _to provide bold insights for a company that delivers on its promises to customers, by_:

- Leading and oversee auditors in performing audit planning, test program development, execution and reporting in multiple regions, including:

- Plan and lead collaborative risk-based technology and cybersecurity audits of moderate to high complexity in a local and global context and conclude whether risks are appropriately managed through the existence of effective controls or other techniques.
- When assuming a supervisory role, the auditor is expected to develop a comprehensive audit plan clearly outlining the objective, scope, deliverables, approach, resourcing, communications, and schedule.
- Support and execute ICOFR reviews and engagements as required.
- Strive for efficient use of audit resources by monitoring execution of audits assigned, timely escalation, and management of conflicts. The incumbent is expected to seek and obtain direction, perspective and resources as required in order to complete the assigned audit on time and within budget.
- Prepare and deliver effective presentations to stakeholders at audit opening and closing meetings as a means of communicating and gaining their agreement and understanding of audit plans and audit results.
- Provide value-adding and effective audit recommendations to stakeholder’s senior management identifying significant issues in a business context, working with audit stakeholders to identify and recommend feasible solutions.
- Present audits conclusions and reports in a relevant context and applicable to Canada Life by ensuring they are supported by an orderly accumulation and analysis of documented audit evidence and that the content is clear and concise.
- Perform accountabilities with mínimal supervision and provide audit management and audit stakeholders with regular status updates of audits and assignments.
- Actively seek to be informed of industry and corporate initiatives and trends to support effective audit continuous monitoring of the organization’s proper management of information and cybersecurity risks.
- Leading and/or participating in professional practice and improvement initiatives
- Cultivating business relationships and work collaboratively with other functional areas
- Creating and maintaining a positive work environment
- Seeking learning and development opportunities in line with organizational needs and personal aspirations.

**What you will bring**:

- Strong working knowledge of governance, risk, control frameworks and audit methodologies
- Maintain information systems competency through ongoing professional development and staying abreast of emerging technologies, risks and controls in information and cybersecurity.
- Provide direction, guidance and expert advice to audit teams globally to allow definition of effective assessments on information and cybersecurity risk management.
- When required, prepare and deliver effective presentations on various audit and information security related matters to Audit senior management and relevant stakeholders across the organization.
- Identify and advise Audit teams globally on the use of relevant data analytics and other advanced techniques and tools in order to improve efficiency and effectiveness of audit assessments.
- Establish and maintain solid relationship with audit stakeholders to serve a catalyst of positive change and improvement of information and cybersecurity risk management.

**Required Qualifications and Competencies**:

- 5+ years of information technology and/or cybersecurity industry experience is required.
- Experience in auditing current and emerging technologies and cybersecurity related risks
- Understanding of technology risk regulatory, best practices and industry best practices.
- Knowledge and practical experience with security assessment tools (exploit tools, vulnerability assessment, SAST, DAST) and Security Operations Centre software (IDS, IPS, SIEM, EDR, etc.).
- Experience in using automation and data analytics tools including ACL, Power Query, advanced Excel, Power BI, etc.
- Working knowledge of Canada Life’s primary business areas or other financial institutes would be an asset.
- Bachelor’s degree in information technology, Computer Science or equivalent is required.
- Excellent verbal, presentation and written communication skills and ability to communicate at all levels of the organization.
- Proven ability to build and maintain trusted collaborative business relationships with the ability to engage and influe